Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Code Analysis — Tools | Kitploit

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
879 results
semantic_firewall preview

semantic_firewall

GitHubblackvectorops/semantic_firewall

Generate deterministic semantic fingerprints for Go functions. Detect xz-style backdoors and verify semantic equivalence using Static Single…

defensive-toolsstatic-analysisstatic-code-analysis+6
36
11h 36m ago
Malicious-code-detection-bugu preview

Malicious-code-detection-bugu

GitHubgmh5225/malicious-code-detection-bugu

AI-based malicious code detection and obfuscation system with microservices for detection, packing, and code confusion, plus user and admin services.

defensive-toolsstatic-analysisvulnerability-analysis+4
4 years ago
hexvero preview

hexvero

GitHubmaximilianfeix/hexvero

The first look at a binary or app bundle: static, execution-free analysis with evidence. CLI, 15-tool MCP server and local web UI, Node only.

android-securitystatic-analysisvulnerability-analysis+9
34 days ago
AgentStalker preview

AgentStalker

GitHubgach0ng/agentstalker

End-to-end security audit framework for LLM agents: static AST and taint modeling, attack synthesis, Docker sandbox replay, and deterministic verdict…

static-analysisvulnerability-scannersdynamic-analysis-sandboxing+7
1302 months ago
scan4secrets preview

scan4secrets

GitHubm14r41/scan4secrets

Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and generates SARIF,…

static-analysisvulnerability-scannersweb-vulnerability-scanners+9
1231 month ago
Vigil preview

Vigil

GitHubvigiloss/vigil

AI-driven security engagements with specialist agents, a Kali runtime, and durable orchestration.

penetration-testing-frameworksreconnaissancestatic-code-analysis+9
87 days ago
hermit preview

hermit

GitHubxv4l3x/hermit

Inspects, decompiles and structurally patches Hermes bytecode (HBC) from React Native apps, with a GDB-style REPL, CFG, decompiler and re-serializing…

android-securitystatic-analysisios-security+7
47 days ago
AetherVM preview

AetherVM

GitHubaethervm/aethervm

LLVM-native binary analysis and emulation platform that lifts AArch64 and x86_64 machine code to LLVM IR for instrumentation, deobfuscation, and…

static-analysisdynamic-analysis-sandboxingvulnerability-analysis+8
1510 days ago
IDA-Ghidra-bridge preview

IDA-Ghidra-bridge

GitHuboscarsantanaarias/ida-ghidra-bridge

TCP JSON bridge servers for IDA Pro and Ghidra exposing decompilation, xrefs, symbols, vtables, RTTI and memory patching to external scripts and…

static-analysiscode-analysisdynamic-code-analysis+6
47 days ago
sast preview

sast

GitHubvulnz/sast

Free offline SAST engine for CI/CD: AST and cross-file taint analysis, secret detection with live validation, SCA/CVE, IaC misconfiguration, and…

defensive-toolsstatic-analysisvulnerability-scanners+9
27 days ago
-LogicSentry-AI preview

-LogicSentry-AI

GitHubvighnesh91/-logicsentry-ai

Offline SAST/DAST triage engine that parses source code and replays HAR traffic to detect business-logic flaws, BOLA, race conditions, and privilege…

static-analysisvulnerability-scannersweb-vulnerability-scanners+9
19 days ago
Arkari preview

Arkari

GitHubkomimoe/arkari

Yet another llvm based obfuscator based on goron.

defensive-toolsstatic-analysiscode-analysis+4
3801 month ago
oss-scanner preview

oss-scanner

GitHubanthropics/oss-scanner

Service that builds enrolled open-source repositories in isolated offline VMs and scans them for security vulnerabilities, emailing findings with…

defensive-toolsstatic-analysisvulnerability-scanners+7
1.0k2 days ago
garble preview

garble

GitHubburrowers/garble

Obfuscates Go builds by wrapping the Go toolchain, replacing identifiers, package paths, and position data with hashes and stripping debug and build…

code-analysisreverse-engineeringscripting-automation+4
5.8k4 days ago
GoBfuscator preview

GoBfuscator

GitHubluftwaffe66/gobfuscator

Obfuscates Go source code via AES-256 string encryption with runtime decryption, identifier renaming, and comment removal to hinder reverse…

defensive-toolsstatic-analysisencryption-decryption-tools+5
121 year ago
msynth preview

msynth

GitHubmrphrazer/msynth

Code deobfuscation framework to simplify Mixed Boolean-Arithmetic (MBA) expressions

static-analysisdynamic-analysis-sandboxingcode-analysis+4
39722 days ago
WebMirage preview

WebMirage

GitHubmoontea0416/webmirage

Adversarial image attacks on vision-language web agents, from visual grounding to browser execution

code-analysisweb-securitypenetration-testing+5
111 days ago
qvm-tool preview

qvm-tool

GitHubneurosaki987/qvm-tool

Static analysis and structure recovery toolkit for ACE .qvm0-protected PE images

static-analysisdynamic-analysis-sandboxingvulnerability-analysis+5
310 days ago
Previous12…49Next